8000 Any way to set response_mode for external IdPs? · keycloak keycloak · Discussion #51988 · GitHub
[go: up one dir, main page]
Skip to content
Discussion options

wnmzzzz
Aug 24, 2026

You must be logged in to vote
Answered by 4nass Aug 25, 2026

Keycloak does not provide a native setting in the Admin Console to change the response_mode for an external OIDC Identity Provider. By default, it uses response_type=code which defaults to query.

You can create a lightweight Keycloak extension (SPI):

  1. Extend OIDCIdentityProvider and override createAuthorizationUrl:
@Override
protected UriBuilder createAuthorizationUrl(AuthenticationRequest request) {
    return super.createAuthorizationUrl(request)
                .queryParam("response_mode", "form_post");
}

  1. Implement a simple OIDCIdentityProviderFactory with a custom ID (e.g., adfs-form-post).

  2. Deploy the compiled .jar to your Keycloak providers/ directory.

This adds a dedicated "…

View full answer

Replies: 1 comment 1 reply

Comment options

4nass
Aug 25, 2026

You must be logged in to vote
1 reply
@wnmzzzz
Comment options

wnmzzzz Aug 26, 2026
Author

Answer selected by wnmzzzz
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
2 participants
@wnmzzzz @4nass
0